Analyzed 113 dump

Top 1: total counts = 11

ChildEBP RetAddr  
00cfe494 00000000 KERNELBASE!RaiseException+0x62

Top 2: total counts = 9

0687f684 622caeed rightsmanager!RM_AutorunScan+0x176
0687f780 75676359 ffi_bindings!ffi_call_win32+0x11
0687f790 77737b74 kernel32!BaseThreadInitThunk+0x19
0687f7ec 77737b44 ntdll!__RtlUserThreadStart+0x2f
0687f7fc 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 7

0697f7c4 628daeed rightsmanager!RM_AutorunScan+0x176
0697f8c0 76087ba9 ffi_bindings!ffi_call_win32+0x11
0697f8d0 77b1c36b kernel32!BaseThreadInitThunk+0x19
0697f928 77b1c2ef ntdll!__RtlUserThreadStart+0x2b
0697f938 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 7

ChildEBP RetAddr  
0038e564 5b2ae479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0038e578 005fcff2 node+0x12ae479
0038e57c 00000000 0x5fcff2

Top 5: total counts = 5

ChildEBP RetAddr  
063aeec8 7b50e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
063aef08 7b51738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
063af158 7b5112a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
063bf7a0 7b50e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
063bf818 7b547f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
063bf9ec 758cfcc9 rightsmanager!RM_AutorunScan+0x176
063bf9fc 774982ae kernel32!BaseThreadInitThunk+0x19
063bfa58 7749827e ntdll!__RtlUserThreadStart+0x2f
063bfa68 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 6: total counts = 5

0655fc7c 7423aeed rightsmanager!RM_AutorunScan+0x176
0655fd78 765f344d ffi_bindings!ffi_call_win32+0x11
0655fd84 778c9802 kernel32!BaseThreadInitThunk+0xe
0655fdc4 778c97d5 ntdll!__RtlUserThreadStart+0x70
0655fddc 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 5

ChildEBP RetAddr  
0642ee58 789de731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0642ee98 789e738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0642f0e8 789e12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0643f730 789de943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0643f7a8 78a17f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0643f97c 76687ba9 rightsmanager!RM_AutorunScan+0x176
0643f98c 7701c36b kernel32!BaseThreadInitThunk+0x19
0643f9e4 7701c2ef ntdll!__RtlUserThreadStart+0x2b
0643f9f4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 8: total counts = 5

ChildEBP RetAddr  
00cfeacc 00000000 KERNELBASE!RaiseException+0x64

Top 9: total counts = 4

ChildEBP RetAddr  
0029e72c 5184e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0029e740 00193201 node+0x12ae479
0029e744 00000000 0x193201

Top 10: total counts = 3

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x183791d

Top 11: total counts = 3

ChildEBP RetAddr  
0695ee68 08d2e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0695eea8 08d3738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0695f0f8 08d312a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0696f740 08d2e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0696f7b8 08d67f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0696f98c 7749336a rightsmanager!RM_AutorunScan+0x176
0696f998 77b19902 kernel32!BaseThreadInitThunk+0xe
0696f9d8 77b198d5 ntdll!__RtlUserThreadStart+0x70
0696f9f0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 12: total counts = 2

ChildEBP RetAddr  
05cdef20 0f67e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05cdef60 0f68738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05cdf1b0 0f6812a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05cef7f8 0f67e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05cef870 0f6b7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05cefa44 7704347d rightsmanager!RM_AutorunScan+0x176
05cefa50 77799852 kernel32!BaseThreadInitThunk+0xe
05cefa90 77799825 ntdll!__RtlUserThreadStart+0x70
05cefaa8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 13: total counts = 2

ChildEBP RetAddr  
0670f1a0 58dee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0670f1e0 58df738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0670f430 58df4ad0 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0670fa48 58df3ea8 rightsmanager!CAutorunsCtrl::EnumFolder+0xb70
0670fc58 58dee951 rightsmanager!CAutorunsCtrl::EnumTaskScheduler+0x738
0670fcd0 58e27f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x61
0670fea4 76797ba9 rightsmanager!RM_AutorunScan+0x176
0670feb4 7789c0cb kernel32!BaseThreadInitThunk+0x19
0670ff0c 7789c04f ntdll!__RtlUserThreadStart+0x2b
0670ff1c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 14: total counts = 2

ChildEBP RetAddr  
0032e5fc 6c2de479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0032e610 005fcff0 node+0x12ae479
0032e614 00000000 0x5fcff0

Top 15: total counts = 2

ChildEBP RetAddr  
066af200 79c9e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
066af240 79ca738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
066af490 79ca12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
066bfad8 79c9e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
066bfb50 79cd7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
066bfd24 75b97ba9 rightsmanager!RM_AutorunScan+0x176
066bfd34 7770c36b kernel32!BaseThreadInitThunk+0x19
066bfd8c 7770c2ef ntdll!__RtlUserThreadStart+0x2b
066bfd9c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 16: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x18378fd

Top 17: total counts = 1

ChildEBP RetAddr  
05b8effc 045991a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
05b8f028 04591b3e rightsmanager!AutorunItem::AutorunItem+0x34
05b9f670 0458e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
05b9f6e8 045c7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05b9f8bc 756e343d rightsmanager!RM_AutorunScan+0x176
05b9f8c8 776c9812 kernel32!BaseThreadInitThunk+0xe
05b9f908 776c97e5 ntdll!__RtlUserThreadStart+0x70
05b9f920 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
122df928 6794533b node+0x12f5573
122df95c 76a2343d node+0x12f533b
122df968 77609802 kernel32!BaseThreadInitThunk+0xe
122df9a8 776097d5 ntdll!__RtlUserThreadStart+0x70
122df9c0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 19: total counts = 1

0d44fac8 105f3294 ntdll!RtlEnterCriticalSection+0x150
WARNING: Stack unwind information not available. Following frames may be wrong.
0d44fad4 105f0ad1 SogouPY+0x5f3294
0d44fb08 105f0cef SogouPY+0x5f0ad1
0d44fb2c 105f0c16 SogouPY+0x5f0cef
0d44fb38 779393e1 SogouPY+0x5f0c16
0d44fb54 7795214f ntdll!RtlProcessFlsData+0x57
0d44fbec 779523e3 ntdll!LdrShutdownThread+0x35
0d44fbfc 77413444 ntdll!RtlExitUserThread+0x2a
0d44fc08 77939812 kernel32!BaseThreadInitThunk+0x15
0d44fc48 779397e5 ntdll!__RtlUserThreadStart+0x70
0d44fc60 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 20: total counts = 1

ChildEBP RetAddr  
00b6e884 00b6e960 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00b6e898 00b6e8a8 0xb6e960
00b6e89c 02d20000 0xb6e8a8
00b6e8a8 00000000 0x2d20000

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0024ea34 69e38046 node+0x10573fa
0024ea5c 69e1ab9b node+0x1078046
0024ea88 69a044bc node+0x105ab9b
0024eb10 69a04913 node+0xc444bc
0024eb1c 026d8f08 node+0xc44913
0024eb20 0024ecf0 0x26d8f08
0024eb24 16400305 0x24ecf0
0024ecf0 00000000 0x16400305

Top 22: total counts = 1

1167f9d0 71e1c1eb kernel32!HeapFree+0x14
WARNING: Stack unwind information not available. Following frames may be wrong.
1167fa10 71e23e96 ipcService+0x5c1eb
1167fa44 77a593e1 ipcService+0x63e96
1167fa60 77a7214f ntdll!RtlProcessFlsData+0x57
1167faf8 77a723e3 ntdll!LdrShutdownThread+0x35
1167fb08 755219e8 ntdll!RtlExitUserThread+0x2a
1167fb1c 7526d5b2 KERNELBASE!FreeLibraryAndExitThread+0x5f
1167fb2c 082986f4 kernel32!FreeLibraryAndExitThreadStub+0x10
1167fb40 082987e2 rightsextension!common_end_thread+0x4d
1167fb4c 0829864f rightsextension!_endthreadex+0xd
1167fb84 7525343d rightsextension!thread_start+0x5d
1167fb90 77a59812 kernel32!BaseThreadInitThunk+0xe
1167fbd0 77a597e5 ntdll!__RtlUserThreadStart+0x70
1167fbe8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 23: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0032c8a8 6e22dc08 node+0x2a2f20b
0032cba7 0a206572 node+0xb2dc08
0032cbab 3437345b 0xa206572
0032cbaf 32303a38 0x3437345b
0032cbb3 32363937 0x32303a38
0032cbb7 205d3035 0x32363937
0032cbbb 38363636 0x205d3035
0032cbbf 34323135 0x38363636
0032cbc3 6d203131 0x34323135
0032cbc7 53203a73 0x6d203131
0032cbcb 65766163 0x53203a73
0032cbcf 2065676e 0x65766163
0032cbd3 312e3131 0x2065676e
0032cbd7 32312820 0x312e3131
0032cbdb 2029302e 0x32312820
0032cbdf 31203e2d 0x2029302e
0032cbe3 20332e30 0x31203e2d
0032cbe7 2e323128 0x20332e30
0032cbeb 4d202933 0x2e323128
0032cbef 32202c42 0x4d202933
0032cbf3 2f20312e 0x32202c42
0032cbf7 322e3020 0x2f20312e
0032cbfb 20736d20 0x322e3020
0032cbff 76612820 0x20736d20
0032cc2b 61636f6c bcryptPrimitives!SymCryptParallelHashProcess+0x1d6
0032cc47 30353236 0x61636f6c
0032cc4b 3636205d 0x30353236
0032cc4f 35353836 0x3636205d
0032cc53 39383635 0x35353836
0032cc57 3a736d20 0x39383635
0032cc5b 72614d20 0x3a736d20
0032cc63 20706565 umpdc!SleepstudyHelperCreateLibrary+0x60
0032cc6f 2029332e 0x20706565
0032cc73 31203e2d 0x2029332e
0032cc77 20312e30 0x31203e2d
0032cc7b 2e323128 0x20312e30
0032cc7f 4d202933 0x2e323128
0032cc83 34202c42 0x4d202933
0032cc87 20322e39 0x34202c42
0032cc8b 2e35202f 0x20322e39
0032cc8f 736d2030 0x2e35202f
0032cc93 61282020 0x736d2030
0032cd93 63617073 0x61282020
0032cda7 00000000 twinapi_appcore!CWrlLightweightHandlerClient,Windows::ApplicationModel::DataTransfer::ShareTarget::IShareOperation,Windows::ApplicationModel::DataTransfer::ShareTarget::IShareOperation2,Windows::ApplicationModel::DataTransfer::ShareTarget::IShareOperation3,IBrokeredTaskNotify> >::GetIids+0x53

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x1837d1d

Top 25: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0034c1b8 6953dc08 node+0x2a2ee0b
0034c4b7 2033206e node+0xb2dc08
0034c4bb 70657473 0x2033206e
0034c4bf 69732073 0x70657473
0034c4c3 2065636e node+0xd22073
0034c4c7 72617473 0x2065636e
0034c4cb 666f2074 0x72617473
0034c4cf 72616d20 0x666f2074
0034c4d3 676e696b 0x72616d20
0034c4d7 6962202c 0x676e696b
0034c4db 73656767 node+0xc1202c
0034c4df 74732074 0x73656767
0034c4e3 30207065 0x74732074
0034c4e7 6d20332e 0x30207065
0034c4eb 77202c73 comctl32!PropSheetDlgProc+0x10
0034c4ff 20747261 kernel32!$$VProc_ImageExportDirectory+0x29a7
0034c503 6d20666f 0x20747261
0034c527 63202c30 comctl32!CImageList::_Clone+0x42
0034c52f 6d20746e 0x63202c30
0034c8af 00000000 comctl32!TV_DrawItem+0xe8e

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522027

Top 27: total counts = 1

ChildEBP RetAddr  
05e6f49c 51e291a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
05e6f4c8 51e21b3e rightsmanager!AutorunItem::AutorunItem+0x34
05e7fb10 51e1e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
05e7fb88 51e57f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05e7fd5c 75fcfcc9 rightsmanager!RM_AutorunScan+0x176
05e7fd6c 773d80ce kernel32!BaseThreadInitThunk+0x19
05e7fdc8 773d809e ntdll!__RtlUserThreadStart+0x2f
05e7fdd8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 28: total counts = 1

ChildEBP RetAddr  
00b8e064 00b8e144 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00b8e078 00b8e088 0xb8e144
00b8e07c 00b8e108 0xb8e088
00b8e088 00000000 0xb8e108

Top 29: total counts = 1

0545fe9c 6e59e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
0545fea4 6e59e8c1 node+0x2f3e6e0
0545fea8 0052b884 node+0x2f3e8c1
0545feac 6e59e7dd 0x52b884
0545feb0 0038e8bc node+0x2f3e7dd
0545feb4 00000000 0x38e8bc

Top 30: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
008fc3c8 6736dc08 node+0x2a2f20b
008fc6c7 73203320 node+0xb2dc08
008fc6cb 73706574 0x73203320
008fc6cf 6e697320 0x73706574
008fc6d3 73206563 0x6e697320
008fc6d7 74726174 0x73206563
008fc6db 20666f20 iertutil!`string'+0x1c
008fc6df 6b72616d 0x20666f20
008fc6e3 2c676e69 0x6b72616d
008fc6e7 67696220 0x2c676e69
008fc6eb 74736567 node+0xe56220
008fc6ef 65747320 iertutil!`string'+0xb
008fc6f3 2e312070 0x65747320
008fc6f7 736d2032 0x2e312070
008fc6fb 6177202c 0x736d2032
008fc6ff 69746c6c 0x6177202c
008fc703 7320656d node+0x2f06c6c
008fc707 65636e69 0x7320656d
008fc75b 746e656d d3d11!CVideoProcessorEnum::CheckVideoProcessorFormat+0x39
008fc76b 3a323134 iertutil!IEVALUE_GUID_Ried_InternetSettings_Lockdown_Zones_4270B+0x1
008fc76f 31423230 0x3a323134
008fc773 38433136 0x31423230
008fc777 3531205d 0x38433136
008fc77b 30333038 0x3531205d
008fc77f 6d203631 0x30333038
008fc783 4d203a73 0x6d203631
008fc787 2d6b7261 0x4d203a73
008fc78b 65657773 0x2d6b7261
008fc78f 2e372070 d3d11!_CTA2?AVbad_weak_ptrstd+0x94ab
008fc793 39282037 0x2e372070
008fc797 2029372e 0x39282037
008fc79b 37203e2d 0x2029372e
008fc79f 2820362e 0x37203e2d
008fc7a3 29372e39 0x2820362e
008fc7a7 2c424d20 0x29372e39
008fc7ab 2e303320 0x2c424d20
008fc7af 202f2036 0x2e303320
008fc7b3 20302e30 0x202f2036
008fc7b7 2020736d 0x20302e30
008fc7bb 65766128 0x2020736d
008fc7bf 65676172 dxgi!`string'+0x20
65766128 00000000 d3d11!CResource::Map<4,5>+0x70

Top 31: total counts = 1

0a91fb7c 7359f943 kernel32!HeapFree+0x14
WARNING: Stack unwind information not available. Following frames may be wrong.
0a91fbbc 735a5c8c 360Conf+0x1f943
0a91fbf0 776494a5 360Conf+0x25c8c
0a91fc0c 776620b5 ntdll!RtlProcessFlsData+0x57
0a91fca4 77662349 ntdll!LdrShutdownThread+0x35
0a91fcb4 7766f5e2 ntdll!RtlExitUserThread+0x2a
0a91fe00 7507336a ntdll!TppWorkerThread+0x846
0a91fe0c 776498f2 kernel32!BaseThreadInitThunk+0xe
0a91fe4c 776498c5 ntdll!__RtlUserThreadStart+0x70
0a91fe64 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 32: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00eff464 6fb58d6c node+0x12ae60a
00eff4cc 6d813961 node+0x2a18d6c
00eff540 6e4089e6 node+0x6d3961
00eff60c 6e40875e node+0x12c89e6
00eff668 6e3e0ec3 node+0x12c875e
00eff6a4 6e3e0acb node+0x12a0ec3
00eff6e4 6e3f23d2 node+0x12a0acb
00eff72c 6e3f22e2 node+0x12b23d2
00eff770 6d80bd42 node+0x12b22e2
00eff798 6d80d47d node+0x6cbd42
00eff7d8 6d74ed6c node+0x6cd47d
00eff834 6d74f379 node+0x60ed6c
00eff858 6d74ea8a node+0x60f379
00eff8f0 77c05eae node+0x60ea8a
00eff9a4 77c03ce6 ntdll!RtlAllocateHeap+0x3e
00eff9bc 72662d00 ntdll!RtlFreeHeap+0x46
00eff9cc 00000000 0x72662d00

Top 33: total counts = 1

001dd143 73657571 node+0x9b2065
001dd147 0a646574 360Base+0xd7571
001dd14b 00000000 0xa646574

Top 34: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0034c988 6d23dc08 node+0x2a2f20b
0034cc87 72614d20 node+0xb2dc08
0034cc8b 77732d6b 0x72614d20
0034cc8f 20706565 0x77732d6b
0034cc93 392e3031 0x20706565
0034cc97 32312820 0x392e3031
0034cc9b 2029332e 0x32312820
0034cc9f 31203e2d 0x2029332e
0034cca3 20342e30 0x31203e2d
0034cca7 2e323128 0x20342e30
0034ccab 4d202933 0x2e323128
0034ccaf 31202c42 0x4d202933
0034ccb3 20382e32 0x31202c42
0034ccb7 2e30202f 0x20382e32
0034ccbb 736d2030 0x2e30202f
0034ccbf 61282020 0x736d2030
0034ccc3 61726576 0x61282020
0034ccc7 6d206567 0x61726576
0034cccb 203d2075 node+0xaf6567
0034cccf 39392e30 0x203d2075
0034ccd3 63202c39 0x39392e30
0034ccd7 65727275 0x63202c39
0034ccdb 6d20746e 0x65727275
0034ccdf 203d2075 node+0xaf746e
0034cce3 30302e31 0x203d2075
0034cce7 6c202930 0x30302e31
0034cceb 6d20776f 0x6c202930
0034ccef 726f6d65 node+0xaf776f
0034ccf3 6f6e2079 0x726f6d65
0034ccf7 69666974 node+0x2fd2079
0034ccfb 69746163 0x69666974
0034ccff 47206e6f 0x69746163
0034cd03 6e692043 0x47206e6f
0034cd07 646c6f20 node+0x1f82043
0034cd0b 61707320 0x646c6f20
0034cd0f 72206563 0x61707320
0034cd13 65757165 0x72206563
0034cd17 64657473 0x65757165
0034cd1b 31325b0a 0x64657473
0034cd1f 303a3436 0x31325b0a
0034cd23 41434130 0x303a3436
0034cd27 5d383346 0x41434130
0034cd2b 39373220 0x5d383346
0034cd2f 35303333 0x39373220
0034cd33 20313430 0x35303333
0034cd37 203a736d 0x20313430
0034cd3b 6b72614d 0x203a736d
0034cd3f 6577732d 0x6b72614d
0034cd43 31207065 0x6577732d
0034cd47 20342e30 0x31207065
0034cd4b 2e323128 0x20342e30
0034cd4f 2d202933 0x2e323128
0034cd53 3031203e 0x2d202933
0034cd57 2820342e 0x3031203e
0034cd5b 352e3231 0x2820342e
0034cd5f 424d2029 0x352e3231
0034cd63 3733202c 0x424d2029
0034cd67 2f20382e 0x3733202c
0034cd6b 302e3020 0x2f20382e
0034cd6f 20736d20 0x302e3020
0034cd73 76612820 0x20736d20
0034cd77 67617265 0x76612820
0034cd7b 756d2065 0x67617265
0034d83b 00000000 setupapi!RequestClientSideUi+0x524

Top 35: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
008ff284 12508cc5 node+0x12ae60a
008ff324 101c3961 node+0x2a18cc5
008ff398 10db89e6 node+0x6d3961
008ff464 10db875e node+0x12c89e6
008ff4c0 10d90ec3 node+0x12c875e
008ff4fc 10d90acb node+0x12a0ec3
008ff53c 10da23d2 node+0x12a0acb
008ff584 10da22e2 node+0x12b23d2
008ff5c8 101bbd42 node+0x12b22e2
008ff5f0 101bd47d node+0x6cbd42
008ff630 100fed6c node+0x6cd47d
008ff68c 100ff379 node+0x60ed6c
008ff6b0 100fea8a node+0x60f379
008ff748 779e5efe node+0x60ea8a
008ff754 00000000 ntdll!RtlAllocateHeap+0x3e

Top 36: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002ccd38 68aadc08 node+0x2a2f20b
002cd037 6b72614d node+0xb2dc08
002cd03b 6577732d node+0x37a614d
002cd03f 31207065 0x6577732d
002cd043 20322e30 0x31207065
002cd047 2e323128 0x20322e30
002cd04b 2d202930 0x2e323128
002cd04f 3031203e 0x2d202930
002cd053 2820322e 0x3031203e
002cd057 302e3231 0x2820322e
002cd05b 424d2029 0x302e3231
002cd05f 3131202c 0x424d2029
002cd063 372e3937 0x3131202c
002cd067 30202f20 0x372e3937
002cd06b 6d20302e 0x30202f20
002cd06f 28202073 0x6d20302e
002cd073 72657661 0x28202073
002cd077 20656761 0x72657661
002cd07b 3d20756d 0x20656761
002cd07f 362e3020 0x3d20756d
002cd083 202c3738 0x362e3020
002cd087 72727563 0x202c3738
002cd08b 20746e65 0x72727563
002cd08f 3d20756d 0x20746e65
002cd093 342e3020 0x3d20756d
002cd097 20293635 0x342e3020
002cd09b 20776f6c 0x20293635
002cd09f 6f6d656d 0x20776f6c
002cd0a3 6e207972 0x6f6d656d
002cd0a7 6669746f 0x6e207972
002cd0ab 74616369 0x6669746f
002cd1ef 6e657272 rsaenh!SHATransformP3+0x5c
002cd1fb 3234342e cryptnet!I_CryptFlushLruCache+0xa
002cd1ff 6f6c2029 0x3234342e
002cd203 656d2077 0x6f6c2029
002cd207 79726f6d 0x656d2077
002cd20b 746f6e20 0x79726f6d
002cd20f 63696669 0x746f6e20
002cd213 6f697461 0x63696669
002cd217 4347206e 0x6f697461
002cd21b 206e6920 0x4347206e
002cd21f 20646c6f 0x206e6920
002cd223 63617073 0x20646c6f
002cd227 65722065 0x63617073
002cd22b 73657571 0x65722065
002cd233 00000000 comctl32!TV_DrawPML+0x5b

Top 37: total counts = 1

ChildEBP RetAddr  
0df9f630 792b0081 rightsextension!std::_Destroy_range,std::allocator > > >+0x29
0df9f66c 792b351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
0df9fb6c 792b4624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
0df9fba0 792b85a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
0df9fccc 792b917a rightsextension!CRegData::MonitorFunction+0x4b3
0df9fcec 792b8a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
0df9fcf4 793c864a rightsextension!std::_Pad::_Call_func+0xa
0df9fd2c 75216359 rightsextension!thread_start+0x58
0df9fd3c 77067c24 kernel32!BaseThreadInitThunk+0x19
0df9fd98 77067bf4 ntdll!__RtlUserThreadStart+0x2f
0df9fda8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 38: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0062cc90 5c70dc08 node+0x2a2ee0b
0062cf8f 205d3833 node+0xb2dc08
0062cf93 37313632 0x205d3833
0062cf97 35353631 0x37313632
0062cf9b 3a736d20 0x35353631
0062cf9f 72614d20 0x3a736d20
0062cfa3 77732d6b 0x72614d20
0062cfa7 20706565 0x77732d6b
0062cfab 20362e37 0x20706565
0062cfaf 372e3928 0x20362e37
0062cfb3 3e2d2029 0x372e3928
0062cfb7 362e3720 0x3e2d2029
0062cfbb 2e392820 0x362e3720
0062cfbf 4d202937 0x2e392820
0062cfc3 34202c42 0x4d202937
0062cfc7 2f20302e 0x34202c42
0062cfcb 302e3020 0x2f20302e
0062cfcf 20736d20 0x302e3020
0062cfd3 76612820 0x20736d20
0062cfd7 67617265 KERNELBASE!ext-ms-win-winrt-storage-win32broker-l1-1-0_NULL_THUNK_DATA_DLA  (KERNELBASE+0x2a2820)
0062cfdb 756d2065 0x67617265
0062cfdf 30203d20 0x756d2065
0062cfe3 3039392e 0x30203d20
0062cfe7 7563202c 0x3039392e
0062cfeb 6e657272 0x7563202c
0062cfef 756d2074 0x6e657272
0062cff3 30203d20 0x756d2074
0062cff7 3834342e 0x30203d20
0062cffb 6f6c2029 0x3834342e
0062cfff 656d2077 0x6f6c2029
0062d003 79726f6d 0x656d2077
0062d007 746f6e20 0x79726f6d
0062d00b 63696669 windows_storage!_CTA2?AVbad_caststd+0x25ae0
0062d00f 6f697461 0x63696669
0062d013 4347206e 0x6f697461
0062d017 206e6920 0x4347206e
0062d01b 20646c6f 0x206e6920
0062d01f 63617073 0x20646c6f
0062d023 65722065 0x63617073
0062d027 73657571 0x65722065
0062d02b 0a646574 0x73657571
0062d02f 3230325b 0xa646574
0062d033 303a3237 0x3230325b
0062d037 36453932 0x303a3237
0062d03b 5d383344 0x36453932
0062d03f 32363220 node+0x17a3344
0062d043 34313133 0x32363220
0062d047 736d2033 0x34313133
0062d04b 614d203a 0x736d2033
0062d04f 732d6b72 0x614d203a
0062d053 70656577 0x732d6b72
0062d057 362e3720 0x70656577
0062d05b 2e392820 0x362e3720
0062d05f 2d202937 0x2e392820
0062d063 2e37203e 0x2d202937
0062d067 39282036 0x2e37203e
0062d06b 2029372e 0x39282036
0062d06f 202c424d 0x2029372e
0062d073 2e363933 0x202c424d
0062d077 202f2036 0x2e363933
0062d07b 20382e32 0x202f2036
0062d07f 2020736d 0x20382e32
0062d083 65766128 0x2020736d
0062d087 65676172 0x65766128
0062d08b 20756d20 0x65676172
0062d08f 2e30203d 0x20756d20
0062d093 2c333939 0x2e30203d
0062d097 72756320 0x2c333939
0062d09b 746e6572 0x72756320
0062d09f 20756d20 windows_storage!_CTA2?AVbad_caststd+0x15232
0062d0a3 2e30203d 0x20756d20
0062d0a7 29333939 0x2e30203d
0062d0ab 776f6c20 0x29333939
0062d0af 6d656d20 user32!wtdccm_NULL_THUNK_DATA_DLA  (user32+0x1c6c20)
0062d0b3 2079726f 0x6d656d20
0062d0b7 69746f6e 0x2079726f
0062d0bb 61636966 0x69746f6e
0062d0bf 6e6f6974 0x61636966
0062d0c3 20434720 0x6e6f6974
0062d0c7 6f206e69 0x20434720
0062d0cb 7320646c 0x6f206e69
0062d0cf 65636170 0x7320646c
0062d0d3 71657220 0x65636170
0062d0d7 74736575 0x71657220
0062d0db 5b0a6465 windows_storage!wkscli_NULL_THUNK_DATA_DLA  (windows_storage+0x686575)
0062d0df 37323032 0x5b0a6465
0062d0e3 32303a32 0x37323032
0062d0e7 44364539 0x32303a32
0062d0eb 205d3833 0x44364539
0062d0ef 33323632 0x205d3833
0062d0f3 30353131 0x33323632
0062d0f7 3a736d20 0x30353131
0062d0fb 72614d20 0x3a736d20
0062d0ff 77732d6b 0x72614d20
0062d103 20706565 0x77732d6b
0062d107 20362e37 0x20706565
0062d10b 372e3928 0x20362e37
0062d10f 3e2d2029 0x372e3928
0062d113 362e3720 0x3e2d2029
0062d117 2e392820 0x362e3720
0062d11b 4d202937 0x2e392820
0062d11f 35202c42 0x4d202937
0062d123 2f20302e 0x35202c42
0062d127 302e3020 0x2f20302e
0062d12b 20736d20 0x302e3020
0062d12f 76612820 0x20736d20
0062d133 67617265 KERNELBASE!ext-ms-win-winrt-storage-win32broker-l1-1-0_NULL_THUNK_DATA_DLA  (KERNELBASE+0x2a2820)
0062d137 756d2065 0x67617265
0062d13b 30203d20 0x756d2065
0062d13f 3239392e 0x30203d20
0062d143 7563202c 0x3239392e
0062d147 6e657272 0x7563202c
0062d14b 756d2074 0x6e657272
0062d14f 30203d20 0x756d2074
0062d153 3938322e 0x30203d20
0062d157 6f6c2029 0x3938322e
0062d15b 656d2077 0x6f6c2029
0062d15f 79726f6d 0x656d2077
0062d163 746f6e20 0x79726f6d
0062d167 63696669 windows_storage!_CTA2?AVbad_caststd+0x25ae0
0062d16b 6f697461 0x63696669
0062d16f 4347206e 0x6f697461
0062d173 206e6920 0x4347206e
0062d177 20646c6f 0x206e6920
0062d17b 63617073 0x20646c6f
0062d17f 65722065 0x63617073
0062d183 73657571 0x65722065
0062d187 0a646574 0x73657571
0062d18b 00000000 0xa646574

Top 39: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
044dee1c 2fc1c38c node+0xce6c1f
00000000 00000000 0x2fc1c38c

Top 40: total counts = 1

003fce43 73657571 0x65722065
003fce47 0a646574 360WebIdentify+0x27571
003fce4b 00000000 0xa646574

Top 41: total counts = 1

ChildEBP RetAddr  
006fe8e4 006fe9c8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
006fe8f8 006fe908 0x6fe9c8
006fe8fc fffffffe 0x6fe908
006fe908 00000000 0xfffffffe

Top 42: total counts = 1

ChildEBP RetAddr  
0c80f784 08250081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
0c80f7c0 0825351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
0c80fcc0 08254624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
0c80fcf4 082585a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
0c80fe20 0825917a rightsextension!CRegData::MonitorFunction+0x4b3
0c80fe40 08258a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
0c80fe48 0836864a rightsextension!std::_Pad::_Call_func+0xa
0c80fe80 7634343d rightsextension!thread_start+0x58
0c80fe8c 77a49802 kernel32!BaseThreadInitThunk+0xe
0c80fecc 77a497d5 ntdll!__RtlUserThreadStart+0x70
0c80fee4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 43: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00dec7d0 66b3dc08 node+0x2a2f20b
00decacf 70656577 node+0xb2dc08
00decad3 2e303120 0x70656577
00decad7 31282034 0x2e303120
00decadb 29332e32 0x31282034
00decadf 203e2d20 0x29332e32
00decae3 342e3031 0x203e2d20
00decae7 32312820 0x342e3031
00decaeb 2029332e 0x32312820
00decaef 202c424d 0x2029332e
00decaf3 392e3336 0x202c424d
00decaf7 30202f20 0x392e3336
00decafb 6d20302e 0x30202f20
00decaff 28202073 0x6d20302e
00decb03 72657661 0x28202073
00decb2b 20776f6c urlmon!CUrlMon::ComposeWith+0x91
00decb3f 206e6f69 0x20776f6c
00decb43 69204347 0x206e6f69
00decb47 6c6f206e node+0x31f4347
00decb4b 70732064 0x6c6f206e
00decb4f 20656361 0x70732064
00decb53 75716572 0x20656361
00decb57 65747365 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xc66572)
00decb5b 345b0a64 0x65747365
00decb5f 3a363533 0x345b0a64
00decb63 42343130 0x3a363533
00decb67 38343636 0x42343130
00decb6b 3335205d 0x38343636
00decb6f 34353535 0x3335205d
00decb73 20383639 0x34353535
00decb77 203a736d 0x20383639
00decb7b 6b72614d 0x203a736d
00decb7f 6577732d 0x6b72614d
00decb83 31207065 0x6577732d
00decb87 20372e30 0x31207065
00decb8b 2e323128 0x20372e30
00decb8f 2d202933 0x2e323128
00decb93 3031203e 0x2d202933
00decb97 2820342e 0x3031203e
00decb9b 332e3231 0x2820342e
00decb9f 424d2029 0x332e3231
00decba3 3937202c 0x424d2029
00decba7 2e333637 0x3937202c
00decbab 202f2034 0x2e333637
00decbaf 32353533 0x202f2034
00decbb3 6d20332e 0x32353533
00decbb7 28202073 0x6d20332e
00decbbb 72657661 0x28202073
00decbe3 20776f6c urlmon!CUrlMon::ComposeWith+0x91
00decbf7 206e6f69 0x20776f6c
00decbfb 69204347 0x206e6f69
00decbff 6c6f206e node+0x31f4347
00decc03 70732064 0x6c6f206e
00decc07 20656361 0x70732064
00decc0b 75716572 0x20656361
00decc0f 65747365 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xc66572)
00decc13 345b0a64 0x65747365
00decc17 3a363533 0x345b0a64
00decc1b 42343130 0x3a363533
00decc1f 38343636 0x42343130
00decc23 3335205d 0x38343636
00decc27 38353535 0x3335205d
00decc2b 20373035 0x38353535
00decc2f 203a736d 0x20373035
00decc33 6b72614d 0x203a736d
00decc37 6577732d 0x6b72614d
00decc3b 31207065 0x6577732d
00decc3f 20342e30 0x31207065
00decc43 2e323128 0x20342e30
00decc47 2d202933 0x2e323128
00decc4b 3031203e 0x2d202933
00decc4f 2820342e 0x3031203e
00decc53 332e3231 0x2820342e
00decc57 424d2029 0x332e3231
00decc5b 3631202c 0x424d2029
00decc5f 352e3231 0x3631202c
00decc63 31202f20 0x352e3231
00decc67 302e3032 0x31202f20
00decc6b 20736d20 0x302e3032
00decc6f 76612820 0x20736d20
00decc73 67617265 0x76612820
00decc77 756d2065 node+0x1607265
00decc7b 30203d20 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xc22065)
00decc7f 3338352e 0x30203d20
00decc83 7563202c 0x3338352e
00decc87 6e657272 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xb8202c)
00decc8b 756d2074 0x6e657272
00decc8f 30203d20 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xc22074)
00decc93 3036352e 0x30203d20
00decc97 6f6c2029 0x3036352e
00decc9b 656d2077 0x6f6c2029
00decc9f 79726f6d 0x656d2077
00decca3 746f6e20 0x79726f6d
00decca7 63696669 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x226e20)
00deccab 6f697461 0x63696669
00deccaf 4347206e 0x6f697461
00deccb3 206e6920 0x4347206e
00deccb7 20646c6f 0x206e6920
00deccbb 63617073 0x20646c6f
00deccbf 65722065 0x63617073
00deccc3 73657571 0x65722065
00deccc7 0a646574 0x73657571
00decccb 00000000 0xa646574

Top 44: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
138cf880 69ce533b node+0x12f5573
138cf8f0 69cbffcb node+0x12f533b
138cf918 760b344d node+0x12cffcb
138cf924 76f29802 kernel32!BaseThreadInitThunk+0xe
138cf964 76f297d5 ntdll!__RtlUserThreadStart+0x70
138cf97c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 45: total counts = 1

ChildEBP RetAddr  
0019ea38 68ece87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0019eb18 68f18a79 node+0x12ae87c
0019eb1c 005fcff0 node+0x12f8a79
0019eb20 00e113f8 0x5fcff0
0019eb24 00000000 0xe113f8

Top 46: total counts = 1

ChildEBP RetAddr  
0099e724 0099e800 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
0099e738 0099e748 0x99e800
0099e73c 0099e93c 0x99e748
0099e748 00000000 0x99e93c

Top 47: total counts = 1

ChildEBP RetAddr  
00afe2e4 00afe3c8 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
00afe2f8 00afe308 0xafe3c8
00afe2fc 02a80000 0xafe308
00afe308 00000000 0x2a80000

Top 48: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0024cbf8 5d5ddc08 node+0x2a2ee0b
0024cef7 3a363538 node+0xb2dc08
0024cefb 36423030 0x3a363538
0024ceff 30344637 0x36423030
0024cf03 3633205d 0x30344637
0024cf07 38363836 0x3633205d
0024cf0b 6d203436 0x38363836
0024cf0f 4d203a73 0x6d203436
0024cf13 2d6b7261 0x4d203a73
0024cf17 65657773 0x2d6b7261
0024cf1b 2e372070 0x65657773
0024cf1f 39282036 0x2e372070
0024cf23 2029372e 0x39282036
0024cf27 37203e2d 0x2029372e
0024cf2b 2820362e 0x37203e2d
0024cf2f 29372e39 0x2820362e
0024cf33 2c424d20 0x29372e39
0024cf37 31343120 0x2c424d20
0024cf3b 2f20392e 0x31343120
0024cf3f 2e393220 0x2f20392e
0024cf43 736d2034 0x2e393220
0024cf47 2b282020 0x736d2034
0024cf4b 35353120 0x2b282020
0024cf4f 6d20362e 0x35353120
0024cf53 6e692073 0x6d20362e
0024cf57 20393120 0x6e692073
0024cf5b 70657473 0x20393120
0024cf5f 69732073 0x70657473
0024cf63 2065636e 0x69732073
0024cf67 72617473 0x2065636e
0024cf6b 666f2074 0x72617473
0024cf6f 72616d20 0x666f2074
0024cf73 676e696b 0x72616d20
0024cf77 6962202c 0x676e696b
0024cf7b 73656767 0x6962202c
0024cfbb 65676172 winmm!ThunkCommonWaveOpen+0x96
0024cfd3 20756d20 0x65676172
0024cfd7 2e30203d 0x20756d20
0024cfdb 29383639 0x2e30203d
0024cfdf 6e696620 0x29383639
0024cfe3 7a696c61 0x6e696620
0024cfe7 6e692065 0x7a696c61
0024cfeb 6d657263 0x6e692065
0024cfef 61746e65 0x6d657263
0024cff3 38335b6c 0x61746e65
0024cff7 303a3635 0x38335b6c
0024cffb 37364230 0x303a3635
0024cfff 5d303446 0x37364230
0024d003 36363320 node+0x853446
0024d007 30353738 0x36363320
0024d00b 736d2039 0x30353738
0024d00f 614d203a 0x736d2039
0024d013 732d6b72 0x614d203a
0024d017 70656577 0x732d6b72
0024d01b 362e3720 0x70656577
0024d01f 2e392820 0x362e3720
0024d023 2d202937 0x2e392820
0024d027 2e37203e 0x2d202937
0024d02b 39282036 0x2e37203e
0024d02f 2029372e 0x39282036
0024d033 202c424d 0x2029372e
0024d037 20362e34 0x202c424d
0024d03b 2e30202f 0x20362e34
0024d03f 736d2030 0x2e30202f
0024d043 2b282020 0x736d2030
0024d047 302e3920 0x2b282020
0024d04b 20736d20 0x302e3920
0024d04f 34206e69 0x20736d20
0024d053 65747320 0x34206e69
0024d057 73207370 0x65747320
0024d05b 65636e69 0x73207370
0024d05f 61747320 0x65636e69
0024d063 6f207472 0x61747320
0024d067 616d2066 0x6f207472
0024d06b 6e696b72 0x616d2066
0024d06f 62202c67 0x6e696b72
0024d073 65676769 0x62202c67
0024d077 73207473 0x65676769
0024d07b 20706574 0x73207473
0024d07f 20392e38 0x20706574
0024d083 202c736d 0x20392e38
0024d087 6c6c6177 0x202c736d
0024d08b 656d6974 0x6c6c6177
0024d08f 6e697320 0x656d6974
0024d093 73206563 0x6e697320
0024d097 74726174 0x73206563
0024d09b 20666f20 0x74726174
0024d09f 6b72616d 0x20666f20
0024d0a3 20676e69 0x6b72616d
0024d0a7 6d203533 0x20676e69
0024d0ab 28202973 0x6d203533
0024d0af 72657661 0x28202973
0024d0b3 20656761 0x72657661
0024d0b7 3d20756d 0x20656761
0024d0bb 392e3020 0x3d20756d
0024d0bf 202c3438 0x392e3020
0024d0c3 72727563 0x202c3438
0024d0c7 20746e65 0x72727563
0024d0cb 3d20756d 0x20746e65
0024d0cf 392e3020 0x3d20756d
0024d0d3 20293038 0x392e3020
0024d0d7 616e6966 0x20293038
0024d0db 657a696c 0x616e6966
0024d0df 636e6920 0x657a696c
0024d0e3 656d6572 0x636e6920
0024d0e7 6c61746e 0x656d6572
0024d0eb 72616d20 0x6c61746e
0024d0ef 676e696b 0x72616d20
0024d0f3 00000000 0x676e696b

Top 49: total counts = 1

ChildEBP RetAddr  
05f3f2d4 50b891a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
05f3f300 50b81b3e rightsmanager!AutorunItem::AutorunItem+0x34
05f4f948 50b7e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
05f4f9c0 50bb7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05f4fb94 75c65d49 rightsmanager!RM_AutorunScan+0x176
05f4fba4 77dad03b kernel32!BaseThreadInitThunk+0x19
05f4fbfc 77dacfc1 ntdll!__RtlUserThreadStart+0x2b
05f4fc0c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 50: total counts = 1

ChildEBP RetAddr  
053fecc0 7ae2e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
053fed00 7ae3738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
053fef50 7ae34ad0 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
053ff568 7ae33ea8 rightsmanager!CAutorunsCtrl::EnumFolder+0xb70
053ff778 7ae2e951 rightsmanager!CAutorunsCtrl::EnumTaskScheduler+0x738
053ff7f0 7ae67f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x61
053ff9c4 76e4fcc9 rightsmanager!RM_AutorunScan+0x176
053ff9d4 76f982ae kernel32!BaseThreadInitThunk+0x19
053ffa30 76f9827e ntdll!__RtlUserThreadStart+0x2f
053ffa40 00000000 ntdll!_RtlUserThreadStart+0x1b